IN THE CLAIMS 

Please amend the claims to read as follows: 
Listing of Claims 

1. (Currently Amended) A data processing system for 
executing at least one program to which access by a user is 
controlled by the provision of credentials assigned to said user, 
said system including: 

at least one terminal including data processing means for 
executing at least part of said program, 

first memory means associated with said program for storing 
. at least first credentials specific to said user, and 

access control means for authorizing access to said program 
in response to an identified match between said first credentials 
stored in said first memory means and second credentials applied 
via said terminal to said program, 

at least one security device personal to said user that is 
associated with said terminal and includes second memory means 
for secure storage of said second credentials, 

said terminal including at least some of a credentials 
management means (CMP) that comprises: 

reading and transmitting credentials means for reading 

said second credentials stored in said second memory means 
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and transmitting the read second credentials to said access 
control means in response to presentation of a request to 
access said program, and 

credentials updating means for selectively activating 
commanding the automatic generation by said terminal, and 
automatic loadings into said first and second memory means 
by said terminal , of new credentials replacing? — in r e s po ns e 
t o th e id e ntifi e d mat c h o f said first and se co nd 
cr e d e ntials, said first and second credentials previously 
stored , and 

an activator for activating automatically said 
credentials updating means each time a match of said first 
and second credentials has been identified , 

2. (Previously Presented) A system according to claim 1, 
wherein said access control means authorize access to said 
program in response to the identified match of said first and 
second credentials. 

3. (Previously Presented) A system according to claim 1, 
wherein: 

said second memory means store a first identification code 
of said user. 



said terminal includes interface means for applying a second 
identification code to said personal security device, 

said personal security device comprises identification code 
validation means, and 

access to said personal security device is authorized by 
said validation means in response to the identified match of said 
first and second identification codes. 

4. (Currently Amended) A system according to claim 1, 
wherein said credentials updating means comp rises ge neratin g 
means for g ene r atin g said n e w c r ed e ntials aut o mati c ally and 
t r ansmittin g th e ge n e rat e d n ew cr ed e ntials dire c tly t o said first 
and se co nd memory means is designed for activating said automatic 
generation and said automatic loading of said new credentials 
without communicating said new credentials to said user, 

5. (Original) A system according to claim 1, wherein said 
credentials management means are software means forming part of 
said program. 

6. (Currently Amended) A system according to claim 5, 
wherein said credentials updating means comp rises ge ne r atin g 
m e ans f or g ene r atin g and l o adin g said n ew c redentials int o said 
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fi r st and sec o nd m e mory means c o nsecutiv e ly is designed for 
activating said automatic generation and said automatic loading 
of said new credentials upon authorization of access by said 
access control means. 

7. (Previously Presented) A system according to claim 6, 
wherein said credentials management means include: 

dating means for dating and loading into at least one of 
said first and second memory means the date at which said 
credentials are generated, and 

inhibitor means for authorizing generation of said new 
credentials by said credentials updating means only after a 
particular time has elapsed since the generation of said 
credentials stored in said first and second memory means. 

8. (Previously Presented) A system according to claims 1, 
wherein said credentials management means are software means that 
are independent of said program. 

9. (Currently Amended) A system according to claim 3, 
wherein: 

said credentials management means are software means 
independent of said program, and 
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said credentials updating means co m p rises ge n er atin g m e ans 
f or ge n er atin g and l o adin g said n ew c red e ntials int o said fi r st 
and se co nd mem o ry means co ns e cutively is designed for activating 
said automatic generation and said automatic loading of said new 
credentials upon validation of said identification code by said 
validation means. 

10. (Previously Presented) A system according to claim 9, 
wherein: 

said credentials management means include dating means for 
dating and loading into at least one of said first and second 
memory means the date at which said credentials are generated, 
and 

inhibitor means for authorizing generation of said new 
credentials by said credentials updating means only after a 
particular time has elapsed since the generation of said 
credentials stored in said first and second memory means. 

11. (Previously Presented) A system according to claim 1, 
wherein said program is stored and executed wholly within said 
terminal for local execution. 
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12. (Previously Presented) A system according to claim 1, 
wherein: 

said system includes at least one server and transmission 
means for transmitting data between said terminal and said 
server, 

said program is stored and executed partly in said terminal 
and partly in said server, and 

said first memory means are associated with said server. 
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